Kaspersky announces NetTraveler is back with new tricks

As per the latest information by Kaspersky Lab researchers, it has announced the emergence of a new attack vector of NetTraveler (also known as “Travnet” or “Netfile”) which is an advanced persistent threat that has already infected hundreds of high-profile victims in more than 40 countries.
 
Immediately after the public exposure of the NetTraveler operations in June 2013, the attackers shut down all known command and control systems and moved them to new servers in China, Hong Kong and Taiwan. They also continued the attacks unhindered, just like the current case shows.
 
So far, we haven’t observed the use of zero-day vulnerabilities with the NetTraveler group. To defend against those, although patches don’t help, but technologies such as Automatic Exploit Prevention and DefaultDeny can be quite effective fighting advanced persistent threats,” said Costin Raiu, Director of Global Research & Analysis Team, Kaspersky Lab.
 
Kaspersky Lab’s Global Research and Analysis Team (GReAT) experts also predict that other recent exploits could be integrated and used against the group’s targets and offer recommendations on how to stay safe from such cyber-attacks.